ClawHub
Back to skill

Security audit

Taplio LinkedIn Analytics Interpreter

Security checks for vulnerabilities and agentic risk

Overview

This skill uses a disclosed Taplio connection to read your LinkedIn analytics and posts and recommend next steps.

Use explicit LinkedIn analytics requests. Expect your assistant to retrieve your Taplio profile context, analytics, and post text. Review connector permissions because Taplio offers publishing features beyond this skill's read-only workflow. A Taplio trial or subscription is required.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Trigger phrases include everyday questions without requiring LinkedIn analytics context.

Medium
Category
Trigger Abuse
Confidence
94% confidence
Finding

Generic triggers such as "is this good ?" and "what should I do based on this ?" do not explicitly require LinkedIn analytics context, potentially activating this skill for unrelated requests. A mistaken activation could cause unsolicited retrieval of connected account data through the mandatory get_me call or divert the user into Taplio signup and connector setup. The LinkedIn-specific title and description reduce the likelihood of misrouting, but the unconditional tool-first workflow increases its consequences.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.